Security News Websites
Dark Reading: http://www.darkreading.com/
Packet Storm: http://packetstormsecurity.com/
Infosecurity: http://www.infosecurity-magazine.com/
Security Week: http://www.securityweek.com/
Netcraft: http://news.netcraft.com/
Hacking / Security Blogs
Ethical Hacking Blog Site: http://www.ehacking.net/
The Ethical Hacker Network: http://www.ethicalhacker.net/
Security Exploded: http://securityxploded.com/
Forensic Artifacts: http://forensicartifacts.com/
Hacking Websites & Forums
Hack Forums: http://www.hackforums.net/
Hacking Truths: http://www.hungry-hackers.com/
The Hack Lair: http://hacktalk.net/
Hacking Practice Sites
Hack this Site: http://www.hackthissite.org/
Hellbound Hackers: http://www.hellboundhackers.org/
Hack Suite: http://www.hacksuite.com/
Hacking Practice Environments
OWASP Web Goat - http://bit.ly/WebGoat
Damn Vulnerable Web App - http://www.dvwa.co.uk/
Gruyere - http://google-gruyere.appspot.com/
Podcasts and Video Series
Cigital Silver Bullet Security Podcast: http://www.cigital.com/silverbullet/
Security Testing Methodologies
OWASP: https://www.owasp.org/
OSSTM: http://www.isecom.org/osstmm/
ISSAF: http://www.oissg.org/issaf/
Threat & Incident Classification
WASC-TC: http://projects.webappsec.org/w/page/13246978/Threat%20Classification
WHID: http://projects.webappsec.org/w/page/13246995/Web-Hacking-Incident-Database
Taxonomy of Coding Errors: https://www.fortify.com/vulncat/en/vulncat/index.html
Common Weakness Enumeration: http://cwe.mitre.org/index.html
Microsoft SIR: http://www.microsoft.com/security/sir/
Tools
Backtrack: http://www.backtrack-linux.org/
Metasploit: http://www.metasploit.com/
NMap: http://nmap.org/
Wireshark: http://www.wireshark.org/
Burp Suite: http://portswigger.net/burp/
Web Scarab: http://bit.ly/webscarab
XSSF: https://code.google.com/p/xssf/
Nessus (Home Feed): http://www.tenable.com/products
Anonymity Online: https://www.torproject.org/
Recommended Books
Web Application Hackers Handbook - Amazon Link
Web Security Testing Cookbook - Amazon Link
Backtrack 4, Assuring Security by Penetration Testing - Amazon Link
Hacking for Dummies - Amazon Link
OWASP Testing Guide - http://bit.ly/qgK9ti
Essays
10 Immutable Laws of security - MS
Security Management - The Fundamental Tradeoffs - MS
(Note: The list is growing and will be split soon..)
Started by Jokin Aspiazu. Last reply by Thomas Ponnet Dec 12, 2012. 1 Reply 0 Likes
Hello there!My name is Jokin, I'm a software tester and I find myself as a newbie on what's related to web security testing.... okay, once I've said this, I'm looking for ways to get better on it. So…Continue
Started by Mark Crowther. Last reply by Steveland Daniels Jan 5, 2012. 23 Replies 2 Likes
Hiya All, Just a quick straw-poll; have any of you performed any security related testing, no matter what level?If you've done any testing where the objective was to evaluate security, defining that…Continue
Started by Abhay Kulshrestha Nov 8, 2011. 0 Replies 0 Likes
Hi All, Please provide your valuable review comments for "Acunetix vulnerability scanner". As it might can be used in our company for application security of " .net 3.5" based websites.If it is not…Continue
Started by Rosie Sherry. Last reply by Mark Crowther Sep 29, 2011. 1 Reply 0 Likes
We have a wiki that is making gradual progress to becoming a useful resource to the community. I think it would be useful to have lots of the information posted here on the wiki. What are your…Continue
Loading feed
Add a Comment
Comment by Duncan nisbet on October 21, 2011 at 16:00 Fancy trying to hack my (wordpress) site guys? Nothing too sinister please, but I have a form I wouldn't mind being secure.
http://www.duncannisbet.co.uk/free-consultation
I need to separate out the top & second level domains into separate fields, but I just want to see how secure the form currently is
I'm using FS Secure Form & Akismet at the moment...
Cheers,
Duncs
If you can make it I just added a Week Night Testing event to the events area.
Looking to do a Black Box Security testing session.
Hope you can join us!

Promoting the group:
Please Tweet the link to this group! http://bit.ly/STCSecurity
Also, hit +1 on related pages where you can
Start discussions, comment and tweet!
Cheers!
© 2013 Created by Rosie Sherry.

You need to be a member of Security Testing to add comments!